Forum Discussion
Defender for Endpoint | Onboarding 2012R2 via local script | md4ws.msi with error id 15
Hi guys, we onboarded ~70 servers and everything went great so far. Our last 2012 R2 gets an error related to the sense service: event viewer: ms document: msi error: ...
- Had this problem on multiple servers and traced to WinDefend service taking a long time to start added the following to the registry temporarily
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control]
"ServicesPipeTimeout"=dword:00075300
after a reboot ran md4ws manually (elevated) and it installed fine every time.
So in my case, I just solved this in the following manner. The issue was it couldn't install the service because there was already a registry key for the service in place. I believe this was due to a previously failed rollback of the MSI attempting to be installed. I had to manually delete the registry key for the windefend service in HKLM\SYSTEM\CurrentControlSet\Services\Windefend. I tried using sc delete windefend, but always got access denied, even in safe mode. Once I removed the registry key, I rebooted. The service no longer showed in the services MMC. I could then run the install successfully.
- It was helpful for me.
